This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json) Hash identifier: nKoJPH7qEZvAj9arkU9xfKj8CT8pgDki2+RSfWNTMzA= Subject key identifier: 3E:2E:12:E6:2B:86:44:5B:2C:EC:FF:95:6E:A4:F9:C9:9E:C3:F5:32 Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3 Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3 Certificate serial: 019AE41646CFF2B38FD68DC6286A4FD0B78F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft Manifest number: 0F2D Signing time: Wed 03 Dec 2025 12:00:56 +0000 Manifest this update: Wed 03 Dec 2025 12:00:56 +0000 Manifest next update: Thu 04 Dec 2025 12:00:56 +0000 Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: AyOarvtfHJcUGPZBrD/FT+a7eL02hsWDHQ9ipaEWCLw=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:16:46:cf:f2:b3:8f:d6:8d:c6:28:6a:4f:d0:b7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3 Validity Not Before: Dec 3 12:00:56 2025 GMT Not After : Dec 4 12:00:56 2025 GMT Subject: CN=3e2e12e62b86445b2cecff956ea4f9c99ec3f532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:1b:73:ee:85:c2:15:4f:0e:0e:fe:40:5f: c8:49:3f:43:b1:e7:00:32:1b:26:d2:27:89:70:d9: ec:d3:cd:5c:0d:73:d1:fb:61:e4:bc:c5:e2:ea:a9: 44:d7:d9:b6:ed:66:0f:a8:3a:f9:cb:a2:ef:bb:3b: fb:19:e1:40:69:f6:1b:b2:c0:9e:fd:22:f9:3a:5d: c5:65:9b:e7:76:f7:bf:04:e6:43:00:26:d4:3b:16: c7:ef:7e:6c:82:da:aa:12:ca:92:37:3d:19:9b:06: 89:76:59:de:50:a2:2c:e0:34:b7:67:0f:94:ed:6d: 1b:2e:32:1e:38:ea:60:34:f5:9e:2f:a2:cc:b9:ea: 20:03:1c:6f:30:6e:05:d9:dd:73:97:85:e2:6e:0c: ca:26:61:da:29:26:e6:c6:68:05:c1:79:27:d1:f5: e2:23:ab:a6:6b:79:5e:0f:95:a5:10:95:8f:0a:9a: 3f:96:04:29:cf:90:eb:84:bd:42:5f:e3:96:f3:f0: 90:9c:03:d9:12:53:1c:02:65:91:93:85:c1:3c:a8: fc:fd:d7:86:f4:35:0c:25:7d:fe:67:6f:e3:5b:a8: d9:1d:14:86:f3:9b:dd:50:b2:b4:de:c7:fc:7d:23: 3a:e1:b2:8f:15:63:0f:90:d2:63:eb:1a:53:c6:85: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2E:12:E6:2B:86:44:5B:2C:EC:FF:95:6E:A4:F9:C9:9E:C3:F5:32 X509v3 Authority Key Identifier: keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:55:c3:c7:1b:e2:6d:a1:c9:4f:8f:86:b3:40:a6:e0:ea:bf: 3c:ac:99:f2:c8:25:85:8d:87:a0:08:30:7c:a1:e8:a1:27:6b: 36:0a:30:02:30:03:7b:46:be:6c:0d:6d:b9:62:01:c4:1e:c7: 7d:1d:b6:5b:c9:5b:8f:32:4a:6d:5b:c4:71:00:21:aa:dc:d5: 4c:bc:23:a7:bb:4c:31:9e:d7:01:1a:2c:3b:19:f4:74:9b:11: 6a:92:b8:fc:87:79:fd:8a:7c:8a:5f:8c:52:c7:45:eb:83:53: cd:29:93:8c:51:58:3c:fb:80:17:02:a8:4f:5e:64:3b:e0:8c: aa:e1:a7:dd:4b:52:54:7a:c0:18:30:1c:e6:00:e6:5d:99:2f: 3c:de:bd:6c:b6:c2:6a:8c:dd:23:35:31:fc:54:cb:fd:5a:fa: f9:c0:97:1b:55:91:09:b8:8e:eb:8b:d0:b7:eb:eb:6f:b8:1d: 5c:fc:43:6a:d5:0f:74:c0:73:e0:bf:8b:b8:88:44:01:62:8a: 5c:98:cd:43:12:cb:54:c1:1f:89:62:f2:5f:61:64:a0:58:ea: b4:87:fd:4b:79:1d:68:76:88:fe:6a:77:a2:dc:45:06:06:9b: 6a:88:d8:87:19:cf:9f:62:e2:b5:33:91:ff:5a:e6:02:c2:b1: 24:77:09:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrkFkbP8rOP1o3GKGpP0LePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMzQ3ODRhYTRhMTk5ZDdjMzZjNzNhMjY1ZWQwOTRiMjE4 MzgxYzMwHhcNMjUxMjAzMTIwMDU2WhcNMjUxMjA0MTIwMDU2WjAzMTEwLwYDVQQD EygzZTJlMTJlNjJiODY0NDViMmNlY2ZmOTU2ZWE0ZjljOTllYzNmNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNYbc+6FwhVPDg7+QF/IST9DsecA Mhsm0ieJcNns081cDXPR+2HkvMXi6qlE19m27WYPqDr5y6Lvuzv7GeFAafYbssCe /SL5Ol3FZZvndve/BOZDACbUOxbH735sgtqqEsqSNz0ZmwaJdlneUKIs4DS3Zw+U 7W0bLjIeOOpgNPWeL6LMueogAxxvMG4F2d1zl4XibgzKJmHaKSbmxmgFwXkn0fXi I6uma3leD5WlEJWPCpo/lgQpz5DrhL1CX+OW8/CQnAPZElMcAmWRk4XBPKj8/deG 9DUMJX3+Z2/jW6jZHRSG85vdULK03sf8fSM64bKPFWMPkNJj6xpTxoXFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4uEuYrhkRbLOz/lW6k+cmew/UyMB8GA1UdIwQY MBaAFLM0eEqkoZnXw2xzomXtCUshg4HDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3pSNFNxU2htZGZEYkhPaVplMEpTeUdEZ2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80ODQwNjctNWQ3Yi00OGE2LWE5OWEt MjFjNWM3OTYzNDU1LzEvc3pSNFNxU2htZGZEYkhPaVplMEpTeUdEZ2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80ODQwNjctNWQ3Yi00OGE2LWE5OWEtMjFjNWM3OTYzNDU1 LzEvc3pSNFNxU2htZGZEYkhPaVplMEpTeUdEZ2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1XDxxvi baHJT4+Gs0Cm4Oq/PKyZ8sglhY2HoAgwfKHooSdrNgowAjADe0a+bA1tuWIBxB7H fR22W8lbjzJKbVvEcQAhqtzVTLwjp7tMMZ7XARosOxn0dJsRapK4/Id5/Yp8il+M UsdF64NTzSmTjFFYPPuAFwKoT15kO+CMquGn3UtSVHrAGDAc5gDmXZkvPN69bLbC aozdIzUx/FTL/Vr6+cCXG1WRCbiO64vQt+vrb7gdXPxDatUPdMBz4L+LuIhEAWKK XJjNQxLLVMEfiWLyX2FkoFjqtIf9S3kdaHaI/mp3otxFBgabaojYhxnPn2LitTOR /1rmAsKxJHcJKw== -----END CERTIFICATE-----Generated at Sun Dec 14 09:13:56 2025 by rpki-client